Bug Bounties

Basecamp

Powered by: 

Allows bounty splitting: 

Average time to first program response: 13

Average time to bounty awarded null: 32

Average time to report resolved: 6029

Handle basecamp

Managed program: false

Name: Basecamp

Offers bounties: true

Offers swag: true

Response efficiency percentage: 100

Submission state: open

Url: https://hackerone.com/basecamp

Website: https://basecamp.com/about/policies/security/response

In scope:

  • Asset identifier: *.hey.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: 3.basecamp.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Basecamp 3
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: Basecamp.app
  • Asset type: DOWNLOADABLE_EXECUTABLES
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Basecamp for Mac: https://basecamp.com/via#basecamp-for-your-mac-or-pc
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: HEY.app
  • Asset type: DOWNLOADABLE_EXECUTABLES
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: HEY for macOS: https://hey.com/apps/
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: HEY.exe
  • Asset type: WINDOWS_APP_STORE_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: HEY for Windows: https://www.microsoft.com/en-us/p/hey-mail/9pf08ljw7gw2
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: basecamp3.exe
  • Asset type: DOWNLOADABLE_EXECUTABLES
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Basecamp for Windows: https://basecamp.com/via#basecamp-for-your-mac-or-pc
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: com.basecamp.bc3
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Basecamp for Android: https://basecamp.com/via#basecamp-for-ios-and-android-devices
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: com.basecamp.bc3-ios
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Basecamp for iOS: https://basecamp.com/via#basecamp-for-ios-and-android-devices
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: com.basecamp.hey
  • Asset type: GOOGLE_PLAY_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: HEY for Android: https://play.google.com/store/apps/details?id=com.basecamp.hey
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: com.hey.app.ios
  • Asset type: APPLE_STORE_APP_ID
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: HEY for iOS: https://apps.apple.com/us/app/hey-email/id1506603805
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: hey-mail
  • Asset type: DOWNLOADABLE_EXECUTABLES
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: HEY for Linux: https://snapcraft.io/hey-mail/
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: launchpad.37signals.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: Launchpad
  • Integrity requirements: 
  • Max severity: critical



  • Asset identifier: world.hey.com
  • Asset type: URL
  • Availability requirement: 
  • Confidentiality requirement: 
  • Eligible for bounty: true
  • Eligible for submissions: true
  • Instruction: 
  • Integrity requirements: 
  • Max severity: critical